$ rpki-client -vvf repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft File: C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft (raw, json) Hash identifier: 1G+RvRGO/T57wn0MKERk5OtPjgVHaV6EPBz6L/6TohI= Subject key identifier: 33:AA:CE:79:76:B7:60:B7:C7:A3:D7:A7:F9:D7:9A:FC:85:56:14:24 Authority key identifier: C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD Certificate issuer: /CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Certificate serial: 743DAC458BFBBBBFFEC46DDFD6D47D03F0677914 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft Manifest number: F1 Signing time: Mon 20 Oct 2025 07:52:08 +0000 Manifest this update: Mon 20 Oct 2025 07:47:08 +0000 Manifest next update: Thu 23 Oct 2025 17:05:08 +0000 Files and hashes: 1: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: frMDYjZLvx/PXC3WNp74+r5lWIhNgG/QgNa89ajNdXU=) 2: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: zJyhGvQzaDs1uZ/vkTZ4lisg94de9IwLPmGapH9vBW8=) 3: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: XsjHTUcHkRjkYPKHbvijLc/iJA9BjCnhWYDW42TR7Mc=) 4: C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl (hash: 6QjYH4U8X/e6BQApYRn4tIrH7kwqKaX2e3QQcaSXoUI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:3d:ac:45:8b:fb:bb:bf:fe:c4:6d:df:d6:d4:7d:03:f0:67:79:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Validity Not Before: Oct 20 07:47:08 2025 GMT Not After : Oct 23 17:05:08 2025 GMT Subject: CN=33AACE7976B760B7C7A3D7A7F9D79AFC85561424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:14:84:1a:27:21:53:be:8c:18:03:aa:3b:3a: 03:ad:c9:d1:2d:9b:ad:91:c3:dc:1e:cb:82:d0:04: 0b:7b:12:af:38:e3:40:c3:c6:bb:4a:77:81:ba:2e: f1:34:1f:80:97:92:2a:cf:3a:80:73:39:f7:4d:f3: 19:71:e4:01:d5:86:c6:64:df:fc:e6:d9:c2:63:9a: 92:5c:83:d6:44:86:11:5f:fa:b4:6f:d7:11:b9:d3: 55:40:a0:ae:48:db:4a:e3:4c:ea:4e:a0:9e:32:b9: 6e:91:d3:b4:73:b4:3a:62:38:78:3e:af:a3:64:6b: fa:b0:cd:98:30:48:5e:23:38:ed:c6:38:6c:08:8b: 49:34:cf:11:97:1b:44:14:75:98:a0:2c:ab:6b:30: 8a:41:4b:e4:cc:57:ab:12:7a:0c:4d:84:72:50:48: da:11:45:92:ba:b4:ab:d8:b8:54:40:7d:13:98:4c: 44:56:ab:12:1d:88:c8:ec:29:f2:e1:27:4f:e4:fc: 5f:ce:29:74:0b:25:f9:b4:5f:1f:5a:e1:c6:e3:6a: ca:0c:d7:36:52:2b:a9:7c:83:94:5f:db:38:d9:7b: 52:23:f8:19:13:de:01:34:ff:d5:c0:bd:46:69:ee: 96:58:77:15:63:88:5a:e3:05:bb:3c:7d:ee:97:e6: c7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:AA:CE:79:76:B7:60:B7:C7:A3:D7:A7:F9:D7:9A:FC:85:56:14:24 X509v3 Authority Key Identifier: keyid:C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:91:97:7d:dd:86:6b:84:71:17:84:26:b7:d9:5d:2f:ef:f2: c6:8f:37:74:b3:19:17:0d:0d:7c:3c:02:b2:5e:9b:37:e6:2d: 4e:80:ee:4a:40:e1:87:33:eb:2c:4f:8c:af:28:3f:01:b7:59: 2b:de:16:d5:75:31:2b:57:39:c6:9f:21:b6:0a:64:db:fd:22: ed:c9:5f:5a:40:81:37:42:f1:34:bb:2f:e6:3e:49:61:4d:cb: c5:28:16:a3:c1:5d:65:45:b2:c8:d6:59:64:0b:ff:50:d8:6c: c3:6c:a9:6a:56:e2:87:6c:43:da:1c:d7:10:0a:30:37:1c:92: 74:6d:a3:f5:b1:aa:c2:6d:c3:81:16:5e:0c:77:f5:e9:cd:43: 06:c4:d4:88:24:5c:b4:c8:4d:e1:da:3f:8b:c9:b6:ed:eb:0c: 46:a9:12:2d:e2:4a:81:81:a6:71:ee:8f:e3:ee:61:37:3d:d1: 22:02:72:4f:c5:7a:4a:72:9f:f4:9e:de:a0:3b:a1:4f:d1:7a: ec:46:1a:54:2c:42:c8:a1:e5:a1:44:43:06:69:5c:d1:31:b4: 1b:f3:9a:02:28:e6:c7:be:7d:81:b8:4d:cb:ae:ab:d2:15:86: 63:75:6b:cb:fe:30:10:64:61:1d:ca:df:08:e0:2e:d9:9d:3d: 5f:64:c9:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdD2sRYv7u7/+xG3f1tR9A/BneRQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5 RkI0N0FERDAeFw0yNTEwMjAwNzQ3MDhaFw0yNTEwMjMxNzA1MDhaMDMxMTAvBgNV BAMTKDMzQUFDRTc5NzZCNzYwQjdDN0EzRDdBN0Y5RDc5QUZDODU1NjE0MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHFIQaJyFTvowYA6o7OgOtydEt m62Rw9wey4LQBAt7Eq8440DDxrtKd4G6LvE0H4CXkirPOoBzOfdN8xlx5AHVhsZk 3/zm2cJjmpJcg9ZEhhFf+rRv1xG501VAoK5I20rjTOpOoJ4yuW6R07RztDpiOHg+ r6Nka/qwzZgwSF4jOO3GOGwIi0k0zxGXG0QUdZigLKtrMIpBS+TMV6sSegxNhHJQ SNoRRZK6tKvYuFRAfROYTERWqxIdiMjsKfLhJ0/k/F/OKXQLJfm0Xx9a4cbjasoM 1zZSK6l8g5Rf2zjZe1Ij+BkT3gE0/9XAvUZp7pZYdxVjiFrjBbs8fe6X5scpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM6rOeXa3YLfHo9en+dea/IVWFCQwHwYDVR0j BBgwFoAUwYTQu6DNGUTBmb8g0OulGp+0et0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTM3NGQ0OC01YTcwLTRjN2YtYmRmZC1kODA1MmViYWYwYWIvMC9DMTg0RDBCQkEw Q0QxOTQ0QzE5OUJGMjBEMEVCQTUxQTlGQjQ3QURELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5RkI0 N0FERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGUzNzRkNDgtNWE3MC00YzdmLWJk ZmQtZDgwNTJlYmFmMGFiLzAvQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1 MUE5RkI0N0FERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAyRl33dhmuEcReEJrfZXS/v8saPN3SzGRcN DXw8ArJemzfmLU6A7kpA4Ycz6yxPjK8oPwG3WSveFtV1MStXOcafIbYKZNv9Iu3J X1pAgTdC8TS7L+Y+SWFNy8UoFqPBXWVFssjWWWQL/1DYbMNsqWpW4odsQ9oc1xAK MDccknRto/WxqsJtw4EWXgx39enNQwbE1IgkXLTITeHaP4vJtu3rDEapEi3iSoGB pnHuj+PuYTc90SICck/Fekpyn/Se3qA7oU/ReuxGGlQsQsih5aFEQwZpXNExtBvz mgIo5se+fYG4Tcuuq9IVhmN1a8v+MBBkYR3K3wjgLtmdPV9kyQI= -----END CERTIFICATE-----Generated at Tue Oct 21 19:21:56 2025 by rpki-client